Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: BKGVtRfReusyIy3NDZUosZqZzVQ6SqiCeGUwy0IDiRA=
Subject key identifier: CD:53:E3:29:F3:59:A9:8C:67:96:88:8A:59:74:B1:CC:ED:B4:9D:01
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 0197B6A14A3881B85ED7F067F5AF4E4853BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 0483
Signing time: Sat 28 Jun 2025 13:01:52 +0000
Manifest this update: Sat 28 Jun 2025 13:01:52 +0000
Manifest next update: Sun 29 Jun 2025 13:01:52 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: BG3NhsZt3DBvNn475W5nICHEDCnHYvgrTHiyAevHKy4=)
2: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (hash: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4a:38:81:b8:5e:d7:f0:67:f5:af:4e:48:53:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Jun 28 13:01:52 2025 GMT
Not After : Jun 29 13:01:52 2025 GMT
Subject: CN=cd53e329f359a98c6796888a5974b1ccedb49d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:74:ab:8e:64:85:c9:61:44:51:63:90:f1:
fd:52:03:41:ca:32:d1:aa:57:22:1b:66:00:1a:3e:
7e:60:2e:9c:02:29:8d:a2:b1:cf:7f:e3:b1:95:d3:
09:be:08:88:7c:5f:8a:4b:ff:ba:70:54:e8:30:2c:
31:7d:e4:5f:54:d3:9b:15:00:e1:cf:bf:b8:0f:aa:
94:84:e0:48:86:80:5e:6d:85:a0:9b:b5:2f:03:b0:
ed:31:7f:ad:cb:88:b6:d8:37:04:fd:aa:73:ae:bf:
e0:1f:80:a1:59:52:08:aa:e1:4e:6d:ee:8e:0a:5d:
72:f6:03:1c:09:51:37:bc:28:e9:b4:42:c9:be:52:
cf:f0:81:07:fa:b3:86:3d:0c:fc:cb:67:96:a3:fe:
2f:df:74:91:28:4f:60:40:87:a6:71:2c:7a:7a:6b:
1b:26:df:2f:92:f6:12:4d:9d:db:29:be:1a:c3:c7:
36:48:ee:9a:e5:03:63:92:d0:5d:9d:18:e7:fa:73:
2d:6e:57:4c:c4:b9:2b:8f:51:e2:41:cf:03:f7:4c:
7f:75:a6:57:7f:b1:2e:c3:71:54:15:5e:05:2d:f8:
d5:6d:15:f4:41:87:4c:6e:e3:21:7d:b8:a1:ca:34:
e4:58:69:46:bb:ca:2c:0a:a7:ab:dd:9c:4a:21:86:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:E3:29:F3:59:A9:8C:67:96:88:8A:59:74:B1:CC:ED:B4:9D:01
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e5:6a:0c:ad:70:fa:66:a4:46:ea:f4:78:26:9f:6d:45:01:
8e:2e:73:a2:49:a1:32:16:8c:eb:81:72:2d:24:bd:26:3a:57:
1a:d6:26:5c:0e:f5:5e:53:5f:79:9c:2c:3b:62:78:85:14:fe:
3e:a9:51:f4:1a:4f:ed:66:51:db:34:67:d5:14:0f:9f:a4:e6:
f3:2d:0b:fe:1e:6b:21:0f:d5:76:8b:1b:26:11:cb:bf:2a:0d:
ce:f1:66:0d:f0:bd:ed:d2:13:40:c9:56:d0:9b:fc:8f:3e:18:
08:f5:2d:68:9e:3d:3e:51:15:49:21:03:b1:f6:6c:e1:9a:35:
43:e4:e7:22:62:86:8d:6e:03:5a:e9:f8:1b:36:17:19:50:7e:
08:ff:7a:bb:09:4f:ac:94:fe:e9:23:9d:b8:5d:e7:5a:32:51:
8d:9c:d3:8b:bd:40:6f:fd:4a:1e:78:fe:19:7e:2b:62:29:c2:
ff:5f:ba:76:3d:24:cb:d5:6b:a5:bf:75:bf:25:6f:2d:08:b7:
a4:a1:d7:11:bc:2c:fd:21:c7:ac:20:57:96:18:0e:5b:a1:cf:
4e:8d:1c:14:ae:c6:a2:37:07:0b:d7:3b:7a:aa:9a:cc:96:52:
0e:dd:af:63:39:c7:42:ea:1b:c4:ca:9d:1d:4d:96:cb:d6:9f:
f6:b9:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:26 2025 by rpki-client